Article discussing the push for passkeys as an alternative to passwords, including numerous problems associated with passkeys like big companies agenda, complicated proprietary implementations, vendor lock-in requirements and dependency on smartphones, dubious value for ordinary users, and misplaced purpose and value, hype and security, lax IT practices and constant private data leaks, psychological reasons why modern Web and email are interactive and phishing-prone due to profit-driven design, wrongness of clickable links, practice of information-only communication, severe implications for privacy and freedom in so-called modern solutions, some other observations, and more

I think this is relevant for Europe because the Passkey technology, being exclusively in the hands of smartphone OS vendors and platforms like Google, Apple, and Microsoft, has very strong implications on European digital souvereignity. Basically, if you use passkeys to access accounts, the vendors can switch off your access to all your accounts at once, because you won’t have working copies of your keys and devices.

  • Unrelated@feddit.nlEnglish
    5·
    12 days ago

    I have the option for passkey login with Bitwarden (and believe I can export them too), or is this not what they meant with it is ‘exclusively in the hands of smartphone OS vendors’? Is it specifically the technology, then?

    The example of Microsoft is not that strong either, because I had a business account 2fa which I only could use with the Microsoft Authenticator, so they managed to make 2fa lock-in too.